Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4ZSV6lWypmEgoSbUOblmEQAabtY.roa
File: 4ZSV6lWypmEgoSbUOblmEQAabtY.roa (raw, json)
Hash identifier: dr+ExfbXU6h8lUYcWzS4kdkg2J53ieFPZng2ovhbN9Y=
Subject key identifier: E1:94:95:EA:55:B2:A6:61:20:A1:26:D4:39:B9:66:11:00:1A:6E:D6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10A2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4ZSV6lWypmEgoSbUOblmEQAabtY.roa
Signing time: Wed 01 Feb 2023 10:28:49 +0000
ROA not before: Wed 01 Feb 2023 10:28:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 203.67.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4258 (0x10a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:49 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E19495EA55B2A66120A126D439B96611001A6ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:20:8c:28:11:85:20:e1:72:4f:57:07:cc:
04:fe:72:8e:28:13:a7:a1:9b:1f:70:0c:ae:8a:18:
d9:8d:9e:b9:3a:79:d2:9d:ed:d0:85:0e:76:73:4f:
a2:ed:e8:f8:c6:0a:df:e0:c7:23:19:24:6c:f4:b0:
b5:99:7a:3f:95:48:2b:84:c1:05:5f:95:36:5e:c7:
8d:be:47:c8:cc:ba:d9:04:af:9d:a7:e0:d5:1b:b6:
52:9b:89:bb:44:e4:c8:a5:74:69:9c:28:de:6f:2b:
26:8b:d1:40:d6:c6:0e:30:2f:4d:bd:df:80:63:a0:
85:ad:b5:4e:ab:7a:5c:4c:34:f0:86:75:eb:8e:3b:
18:14:6f:bf:51:62:b2:38:84:b6:e0:e7:f6:71:ae:
4c:ec:d1:65:5e:9f:45:a3:f3:4a:be:fd:e1:22:64:
b6:ff:e5:2f:b2:a8:fa:c3:1b:fe:b3:12:84:3e:8a:
37:10:56:7d:b1:81:40:0f:83:87:e9:a9:10:90:04:
57:d7:d1:4c:38:f8:3a:c5:df:0a:c6:bb:6e:42:a6:
43:1a:ec:26:45:46:12:75:23:16:f9:ba:57:80:32:
bf:45:aa:1b:8e:d2:00:38:fb:3a:d9:11:b9:f0:d2:
93:c3:7f:3a:bb:d0:9f:91:be:fc:5c:bf:36:4f:8c:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:95:EA:55:B2:A6:61:20:A1:26:D4:39:B9:66:11:00:1A:6E:D6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4ZSV6lWypmEgoSbUOblmEQAabtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:26:1b:00:c2:95:66:7a:7f:b9:c3:90:9b:96:85:da:b8:95:
04:75:9f:15:97:eb:67:77:ba:29:4c:44:1f:82:12:b9:a3:8a:
01:3a:30:f8:f8:fa:af:82:76:d9:13:85:c2:66:5e:84:b7:a6:
1e:2e:a1:86:94:52:c1:1a:d2:a6:4f:07:a0:48:5e:90:85:96:
09:3b:f7:fe:0e:11:b2:5d:71:cd:0f:0a:56:14:23:03:75:2e:
f4:8e:48:5d:e2:93:30:24:c4:1e:de:e0:91:6d:10:29:ce:7c:
37:91:60:81:1b:9f:9e:82:6f:25:e9:83:7c:b3:83:64:5e:74:
f2:a0:16:fd:fd:c8:eb:85:01:4a:cd:a2:88:f1:99:9a:78:4a:
86:ee:0b:fb:0c:f9:e3:5c:5b:d4:6f:ef:12:ae:08:ea:fd:17:
23:38:e0:f6:3e:e1:9f:2b:a4:ce:7d:51:9e:1c:67:66:37:38:
43:04:8e:0c:41:2e:cf:77:66:f6:fc:2d:7f:1b:45:b1:11:3d:
7b:7e:c6:1f:56:4e:1b:29:a1:ee:2c:bc:6c:54:4b:9d:56:bc:
b7:c1:78:36:61:96:62:73:b1:de:ab:fd:e6:08:1b:48:d9:a5:
c8:94:68:2e:3b:c6:31:18:da:c6:7f:d0:41:4c:00:84:ef:27:
ed:d9:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:49 2025 by rpki-client